This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          LB3+J0VNtDwUdTCEycPsFyjBNrhFs0siSiEzAKEBfWI=
Subject key identifier:   83:64:8A:EE:33:F2:44:80:53:89:B2:AC:1A:32:5F:93:59:FE:7C:67
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          E2
Signing time:             Fri 19 Dec 2025 04:37:12 +0000
Manifest this update:     Fri 19 Dec 2025 04:37:11 +0000
Manifest next update:     Fri 26 Dec 2025 04:37:11 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: w+5nfVNRPx/oGu0dMinDwKo0WyNDtuXng/BZoA74qi8=)
                          2: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: 441G8b4LgkMuxEvi6rr2h+MeNX8DO9NZrdStvzuDXU8=)
                          3: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: RbKkyjXke83zBAWzSPfYjpUNrMECuKEikKXztzGqzuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Dec 19 04:37:11 2025 GMT
            Not After : Dec 26 04:37:11 2025 GMT
        Subject: CN=6944d678-6663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:19:b6:21:f1:ae:c2:67:8a:e4:4b:f9:16:
                    c5:38:b3:d7:13:f6:94:cb:28:51:b4:08:c4:56:c8:
                    33:a2:01:d4:c0:7b:85:f9:3e:56:88:39:ac:d2:57:
                    53:3c:43:b0:b7:d9:aa:fd:53:a9:51:94:84:23:21:
                    a8:64:75:77:7a:6c:ff:93:91:6d:e1:82:21:ac:71:
                    aa:22:7b:11:ca:4d:f3:2e:a8:65:2a:76:6f:e0:58:
                    ce:4a:39:d5:0c:aa:af:48:86:88:dc:ce:ba:0e:8f:
                    1b:05:96:90:38:37:f5:e6:33:59:0a:a3:45:9f:d5:
                    c1:32:5c:7e:7d:89:f4:f1:f9:10:4e:e6:18:b1:71:
                    51:e1:c0:3c:1a:11:8d:6a:65:64:8e:30:13:14:be:
                    54:fe:cd:be:96:98:57:3d:7a:0b:c5:25:3a:e4:39:
                    c8:e1:3f:31:81:f7:2a:bd:aa:f7:f3:2e:80:b6:f9:
                    d5:ac:c9:e2:aa:58:c3:31:a7:de:94:7f:a7:78:56:
                    99:df:ba:b7:83:a0:85:13:48:b7:13:32:cb:20:53:
                    7f:e2:6c:79:30:b8:cc:7a:4f:1a:33:1a:15:74:59:
                    d2:42:ba:ea:80:cf:db:e6:b3:5b:25:1e:f6:f3:eb:
                    5f:b5:0d:52:f4:f5:d5:6d:ca:fa:ec:2e:97:73:fa:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:64:8A:EE:33:F2:44:80:53:89:B2:AC:1A:32:5F:93:59:FE:7C:67
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:45:8d:b4:e2:45:ad:db:64:f3:e7:30:03:8b:9f:84:48:9f:
         a8:82:b9:d5:81:f1:ce:ab:c0:a6:61:ed:72:84:8c:9e:8b:dc:
         db:cc:ed:d6:36:bc:95:4a:5e:51:96:fc:9e:1a:d1:4c:50:20:
         83:48:ec:55:96:b7:81:57:ac:02:4e:5b:8e:07:d6:14:f8:ce:
         95:cc:19:18:58:ef:5a:25:5c:64:01:0f:c6:72:c4:97:da:1b:
         2f:4f:6b:63:28:0a:1b:17:4e:65:39:01:4e:60:53:1a:6b:9f:
         05:00:20:68:ce:bb:6a:73:e2:ad:9a:bf:84:f1:72:bc:5e:db:
         a3:25:65:f3:cd:6f:4e:53:0c:43:cf:a0:12:7d:e3:7d:df:ef:
         ff:84:7a:81:8a:74:f6:4d:ed:b3:cb:64:e2:7e:71:50:24:27:
         b2:cc:cf:da:bd:59:4f:da:37:d1:e3:f6:64:5d:36:55:ed:5a:
         7f:3c:5b:89:da:64:85:52:dd:5d:42:1d:91:fc:3e:d3:f6:5f:
         d3:63:20:f8:e1:33:56:76:f8:06:2e:c9:48:db:c9:1d:a7:85:
         d8:e6:44:b5:d1:b8:2e:da:37:25:4d:f6:f2:49:9a:fc:7f:0b:
         76:db:11:b0:9b:00:c6:57:95:6e:68:28:5c:0a:e4:fd:d1:85:
         07:28:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:50:08 2025 by rpki-client